CB Response: Sensors show "invalid date" for Activity on sensors page in console
book
Article ID: 291782
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
- Sensors show "Invalid Date" for Activity status on Sensors page in WebUI console
- Sensors in this state never seem to checkin and submit data before the next round of registration happens to create duplicates
Environment
- Cb Response Server: All Versions
Cause
The "invalid date" entries in the WebUI is due to the last_update time being `NULL` in PSQL(postgres) sensor_registrations table.
Resolution
Run this query to mark all of those affected sensors as "uninstalled"
#psql -d cb -p 5002 -c "update sensor_registrations set uninstalled='t' where last_update is NULL and registration_time <= current_timestamp -(10 * interval '1 day');"
Feedback
thumb_up
Yes
thumb_down
No